WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Sep 25, 2016 | |
| Debian | debian-upgrade-chromium-browser | Sep 15, 2016 | Sep 15, 2016 | |
| Freebsd | freebsd-upgrade-package-chromiumfreebsd-upgrade-package-chromium-npapifreebsd-upgrade-package-chromium-pulse | Nov 14, 2016 | Sep 16, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-www-client-chromium | Oct 30, 2017 | Sep 25, 2016 | |
| Google Chrome | google-chrome-upgrade-latest | Sep 28, 2016 | Sep 25, 2016 | |
| Redhat_linux | — | redhat-upgrade-chromium-browserredhat-upgrade-chromium-browser-debuginfo | Oct 21, 2016 | Sep 16, 2016 |
| Suse | — | suse-upgrade-chromedriversuse-upgrade-chromiumsuse-upgrade-chromium-desktop-gnomesuse-upgrade-chromium-desktop-kdesuse-upgrade-chromium-ffmpegsumo | Sep 15, 2016 | Sep 15, 2016 |
| Ubuntu | ubuntu-upgrade-liboxideqtcore0 | Oct 7, 2016 | Sep 25, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub